feat: upgrade next-auth to v5.0.0-beta.29 and refactor authentication middleware

- Updated next-auth dependency in package.json to version 5.0.0-beta.29.
- Refactored create-admin script to use a valid email format.
- Implemented authentication middleware for various API routes to enforce access control.
- Refactored API route handlers to improve readability and maintainability.
- Enhanced error handling in authentication error page.
- Added detailed tests for authentication flow, including protected routes and NextAuth endpoints.

src/app/api/contracts/route.js

@@ -1,7 +1,8 @@
 import db from "@/lib/db";
 import { NextResponse } from "next/server";
+import { withReadAuth, withUserAuth } from "@/lib/middleware/auth";
 
-export async function GET() {
+async function getContractsHandler() {
 	const contracts = db
 		.prepare(
 			`
@@ -21,7 +22,7 @@ export async function GET() {
 	return NextResponse.json(contracts);
 }
 
-export async function POST(req) {
+async function createContractHandler(req) {
 	const data = await req.json();
 	db.prepare(
 		`
@@ -46,3 +47,7 @@ export async function POST(req) {
 	);
 	return NextResponse.json({ success: true });
 }
+
+// Protected routes - require authentication
+export const GET = withReadAuth(getContractsHandler);
+export const POST = withUserAuth(createContractHandler);